The ransom demand
https://www.bleepingcomputer.com/news/security/new-nemty-ransomware-may-spread-via-compromised-rdp-connections/
A new ransomware has been spotted over the weekend, carrying references to the Russian president and antivirus software. The researchers call is Nemty.
This is the first version of Nemty ransomware, named so after the extension it adds to the files following the encryption process.